425 Open source projects that are alternatives of or similar to Codeql Go

Program analysis playground for a simple, imperative language

Static Analyzer for LLVM bitcode based on Abstract Interpretation

Semgrep rules registry

Static analysis of IEC 61131-3 programs

TIRO - A hybrid iterative deobfuscation framework for Android applications

A LLVM-based static analysis framework.

CoRnucopia of ABstractions: a library for building abstract interpretation-based analyses

T.J. Watson Libraries for Analysis

Static Analysis Compiler Plugin for Scala

[LLVM Static Slicer] Various program analyses, construction of dependence graphs and program slicing of LLVM bitcode.

Program for determining types of files for Windows, Linux and MacOS.

Performant type-checking for python.

A Static Analysis Tool for Detecting Security Vulnerabilities in Python Web Applications

SeaHorn Verification Framework

Static Analyzer for LLVM bitcode based on Abstract Interpretation

Static analyzer for C/C++ based on the theory of Abstract Interpretation.

Binary Analysis Platform

PHPStan rules for detecting usage of deprecated classes, methods, properties, constants and traits.

Prevent cloud misconfigurations during build-time for Terraform, Cloudformation, Kubernetes, Serverless framework and other infrastructure-as-code-languages with Checkov by Bridgecrew.

PHPMD is a spin-off project of PHP Depend and aims to be a PHP equivalent of the well known Java tool PMD. PHPMD can be seen as an user friendly frontend application for the raw metrics stream measured by PHP Depend.

Scanning APK file for URIs, endpoints & secrets.

Awesome Java Security Resources 🕶☕🔐

Code Climate CLI

Parser for Angular projects.

The leading static analyzer for Perl. Configurable, extensible, powerful.

SBT Plugin for OWASP DependencyCheck. Monitor your dependencies and report if there are any publicly known vulnerabilities (e.g. CVEs). 🌈

Sys: A Static/Symbolic Tool for Finding Good Bugs in Good (Browser) Code

Moved to Polymer/tools monorepo

Strict coding standard for Kotlin and a custom set of rules for detecting code smells, code style issues and bugs

A Java 8+ Jar & Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger & More)

Policeman's Forbidden API Checker

Static code analysis for CFML (a linter)

✊ Detect non-inclusive language in your source code.

Manage localization with static analysis. 🔍

Security scanner for your Terraform code

Type Analyzer for JavaScript

Code metrics for Java code by means of static analysis

TypeScript Compiler API wrapper for static analysis and programmatic code changes.

Intellisense for PHP

Triton is a Dynamic Binary Analysis (DBA) framework. It provides internal components like a Dynamic Symbolic Execution (DSE) engine, a dynamic taint engine, AST representations of the x86, x86-64, ARM32 and AArch64 Instructions Set Architecture (ISA), SMT simplification passes, an SMT solver interface and, the last but not least, Python bindings.

Gradle plugin for PIT Mutation Testing

Swiss-army knife for D source code

A reviewed list of useful PHP static analysis tools

Python script to detect vulnerabilities inside PHP source code using static analysis, based on regex

Analyzer: checks whether HTTP response body is closed and a re-use of TCP connection is not blocked.

Soot - A Java optimization framework

A Psalm plugin for Laravel

Find similar functions and classes in your JavaScript/TypeScript code

GCC plugin that embeds CPython inside the compiler

Static program analysis for TIP

Symbolic execution tool

[DEPRECATED] Security Scanner for Ethereum Smart Contracts

Automated code reviews via mutation testing - semantic code coverage.

an advanced semantic indexer for Ruby

C code refactoring browser

A curated list of mathematics documents ,Concepts, Study Materials , Algorithms and Codes available across the internet for machine learning and deep learning

Bolt is a language with in-built data-race freedom!

SpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.

Datalog compiler in Rust as a procedural macro

Manage translation and localization with static analysis, for Ruby i18n